ProxyWatch
Watches a protocol's upgrade and admin surface over public RPC and reports the moment it changes, with severity and on-chain evidence.
Details · $499/mo self-serve
Read-only · No keys · Public data
Small tools for on-chain risk, built to be checked.
Marlo builds a focused portfolio of read-only tools for teams that need to see changes, trace value, and keep a record. Nothing here holds a private key, signs a transaction, or touches your infrastructure.
Every output carries the on-chain evidence behind it, so a claim can be verified against the chain rather than taken on trust.
Products
Three working tools. Each addresses one narrow question and answers it with evidence.
FundTrace
Takes one address and a block range, then reports every ERC-20 transfer it was party to, ranked counterparties, token totals, and simple flow patterns worth a second look.
Details · from $500 per triage
AgentWire
A read-only HTTP API and Atom feed over a curated record of AI-agent incidents, with citations to each original source.
Details · $99–499/mo
What the products share
The same constraints apply across the portfolio. They are design decisions, not marketing lines.
- Read-only. Each tool reads public chain data or a local dataset. None of them write, sign, or submit anything.
- No keys held. There is nothing here that could move funds or alter a contract. That removes a class of risk rather than managing it.
- Public RPC and standard libraries. The products run on public endpoints and the Node standard library, with no third-party packages by default.
- No outbound contact. The tools do not call third parties, and FundTrace and AgentWire perform no outbound requests at all.
- Evidence in the output. Alerts cite the transaction and block; reports carry the transaction hash behind each row.
Where the code lives
This site describes working software. The source sits under products/ in the repository.
| Product | Path | Reference |
|---|---|---|
| ProxyWatch | products/proxywatch | README.md, SPEC.md |
| FundTrace | products/fundtrace | README.md, docs/methodology.md |
| AgentWire | products/agentwire | README.md, docs/API.md |
Limits
What this portfolio is not
These tools are monitoring and analysis software. They are not audits, not insurance, and not legal, financial, or investment advice. They do not prevent losses, remediate incidents, or recover funds, and they carry no guarantee that a given change or transaction will be detected.
FundTrace and AgentWire report heuristics and records that can be wrong in both directions. Treat any output as a starting point to verify, not a conclusion. Each product page states its own limits in more detail.